WE’RE BACK! Episode - Kickstart the cool months! Security Insights - Foresight - Hindsight
Show notes
October 2026 Edition – Return from BreakThe late summer / early fall break is over.We return this Thursday, October 22nd to restart the show.October is Cybersecurity Awareness Month.
* After six years of weekly shows, the crew took part of August, all of September and half of October, to recharge, handle back-office work, and rethink the format. Fresh energy (and dad jokes) promised on return.
What the Crew Did on Break
* Rod Trent – Kept daily Security Check-in Quick Hits and THE PROMPT running nonstop. Covered ConnectWise M365 compromises, AI agent acceleration, BeyondTrust zero-days, and the collapsing patch window. Planning new Microsoft podcast Security in the Loop.
* Gary Bushey (Cyclotron) – Published guidance on Sentinel Notebooks for hunting, investigation, and analytics (including Graph + Data Lake). Continued writing on the Defender portal transition. Cyclotron earned a second consecutive year in the Microsoft AI Business Solutions Inner Circle.
* Edward Walton – Refined the newsletter pipeline and prepared the return framing around agent security and Perception.
* Frank Grimberg – Took the break (last seen on vacation). Expected to return with strong opinions on exams, XDR, and what security means in the age of AI agents.
Highly Opinionated Facts They’re Bringing Back
* Agent security is no longer a side conversation — 2026 attached real incidents, CVEs, and production failures to the OWASP Agentic list.
* The patch window is collapsing; detection and containment now matter more than perfect patching speed.
* Sentinel Notebooks + Graph + Data Lake remain underused relative to their value.
* AI gateways are a primary attack surface, not a side project.
* Human control on high-impact agent actions remains non-negotiable.
General
* Agents are your newest insiders. Security must move at their speed. | Microsoft Security Blog (Oct 19)
* Insights from the 2026 Microsoft Digital Defense Report | Microsoft Security Blog
* What’s new in Microsoft Security: September 2026 | Microsoft Security Blog
AI Security
* Managing open-weight model risk in enterprise deployments | Microsoft Security Blog (Oct 16) – Microsoft + NVIDIA whitepaper
* 3 lessons from frontier AI vulnerability research | Microsoft Security Blog (Oct 7) – FORGE Lab
Agent365 / Agentic Security
* Agents are your newest insiders. Security must move at their speed. | Microsoft Security Blog (Oct 19) – Microsoft 365 E7 + Project Perception expansions for continuous agent risk assessment, adaptive permissions, and containment
* What is Project Perception? | Microsoft Learn
* Introducing MAI-Cyber-1-Flash inside MDASH | Microsoft AI
Threat Intelligence
* The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime | Microsoft Security Blog (Oct 14) – Storm-2990 / Storm-3119
* Microsoft Digital Defense Report 2026 | Governments now most impacted sector (27%)
Microsoft Entra
* What’s New in Microsoft Entra (October coverage via Rod’s THE PROMPT and Microsoft Security Blog)
Defender XDR & Sentinel
* What’s new in Microsoft Defender XDR | Microsoft Learn
* What’s new in Microsoft Sentinel | Microsoft Learn
* October Patch Tuesday: record ~1,411–1,413 CVEs, including exploited Windows Shell zero-day (CVE-2026-96951)
Purview – Compliance & Governance
* Microsoft Purview protections for generative AI & Copilot | Microsoft Learn
* Purview for AI agents & Agent 365 | Microsoft Learn
Cybersecurity Awareness Month 2026
* Theme: Securing the Next 250 (CISA)
* Core steps: avoid phishing, strong passwords + password managers, MFA, keep software updated
* Microsoft skilling: Defend the Tenant Challenge, role-based learning, live events, credentials, and AI Skills Navigator content all month
* CISA Cybersecurity Awareness Month
Non Microsoft Security News
* ConnectWise Cloud Backup credential compromise granted access to 173+ Microsoft 365 tenants
* Burger King Japan app breach (~11.18 million member records)
* BAE Systems incident took the U.S. Federal Bankruptcy Noticing Center offline
Featured Resources & Deep Dives
* Gary Bushey / Cyclotron Sentinel content
* Security for AI solutions hub
What’s New in Defender
* What’s new in Microsoft Defender XDR | Microsoft Learn
* AI agent posture risk and Agent 365 runtime protections
* Project Perception expansions for continuous agent risk assessment and containment (Oct 19)
* Defender Experts MDR P2 third-party coverage via Sentinel
Podcast Stuff for October
* Return episode: Thursday, October 22, 2026 — “WE’RE BACK”Hosts: Edward Walton, Frank Grimberg, Rod TrentFocus: break recap, Cybersecurity Awareness Month, highly opinionated facts, and current Microsoft Security / agent topics
* Recent pre-break episodes:
* Episode 298 – Julian Kusenberg on Purview, Agents, and AI
* Episode 297 – Black Hat / Defcon recap + Project Perception
* Episode 296 – Black Hat prep and the OpenAI agent incident
* Full archive and live links: www.microsoftsecurityinsights.com
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com